This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't use Port 443

Hi everyone,

First question can I use Port 443 for the User Portal and the SSL VPN at the same time on my Sophos UTM 9?

I put all my Services on other Ports so that Port 443 should be free.
SSL VPN is running on 1194 UDP
and the User Portal on 4443 TCP
If I do a port Scan there is no service on 443 also no telnet connections is possible.

telnet hostname 443
Trying x.x.x.x...
telnet: connect to address x.x.x.x: Operation timed out
telnet: Unable to connect to remote host

But when I try to put the User Portal for example on Port 443 TCP it is not working. Also the same with the SSL VPN.

It seems that Port 443 is not working on my UTM.
It seems that the UTM is blocking the Port 443 maybe with a other service I don't know. Is there any option to evaluate why my Port 443 is not working or if any service is using this port?

I attached a screenshot of my Firewall Rules and Masquerading Rules
Is there any failure ??

This thread was automatically locked due to age.

Parents

0 BarryG over 12 years ago

Yes, login with SSH, and then become root with
su -

Then, run tcpdump on your EXT interface (eth0 or whatever):
tcpdump -i eth0 dst port 443

And try to connect from somewhere else.
You should see packets with port 443 and your External IP address as the destination.

If you see the packets, start checking log files (PacketFilter & IPS to start).

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 keamas over 12 years ago in reply to BarryG
Yes, login with SSH, and then become root with
su -

Then, run tcpdump on your EXT interface (eth0 or whatever):
tcpdump -i eth0 dst port 443

And try to connect from somewhere else.
You should see packets with port 443 and your External IP address as the destination.

If you see the packets, start checking log files (PacketFilter & IPS to start).

Barry

Ok I activated now the User Portal on Port 443
Then I tried to connect to the user portal page with my Phone.
I have a lot of traffic but can't see the IP of my Phone.
But a lot of other Traffic for example this ones the IPs belong to apple and microsoft.

20:42:04.931326 IP hostname.57894 > 17.172.192.35.https: . ack 858 win 65535
20:42:20.836425 IP hostname.57418 > 65.55.223.38.https: P 69828736:69828740(4) ack 4041310092 win 65535

I hope my Firewall is still Secure this are only the Services connection home right ?

so this command showes me packages going in and out right or do I have a security issue. Or is there something wrong with this tcpdump command ?

but no traffic on port 443 only but port 4443 is working.

By the way can I run the User Portal and SSL VPN on the same port ??
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 keamas over 12 years ago in reply to BarryG
Yes, login with SSH, and then become root with
su -

Then, run tcpdump on your EXT interface (eth0 or whatever):
tcpdump -i eth0 dst port 443

And try to connect from somewhere else.
You should see packets with port 443 and your External IP address as the destination.

If you see the packets, start checking log files (PacketFilter & IPS to start).

Barry

Ok I activated now the User Portal on Port 443
Then I tried to connect to the user portal page with my Phone.
I have a lot of traffic but can't see the IP of my Phone.
But a lot of other Traffic for example this ones the IPs belong to apple and microsoft.

20:42:04.931326 IP hostname.57894 > 17.172.192.35.https: . ack 858 win 65535
20:42:20.836425 IP hostname.57418 > 65.55.223.38.https: P 69828736:69828740(4) ack 4041310092 win 65535

I hope my Firewall is still Secure this are only the Services connection home right ?

so this command showes me packages going in and out right or do I have a security issue. Or is there something wrong with this tcpdump command ?

but no traffic on port 443 only but port 4443 is working.

By the way can I run the User Portal and SSL VPN on the same port ??
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data